Xerte Online Toolkits 路径遍历漏洞

Xerte Online Toolkits is an online learning content creation platform provided by British company Xerte. Versions of Xerte Online Toolkits 3.15 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the elFinder connector in the /editor/elfinder/php/connector.php...

CVE-2026-28292 simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE

simple-git, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes CVE-2022-25860 and CVE-2022-25912 and achieve full remote code execution on the host machine. Version 3.23.0 contains ...

WordPress plugin Paid Downloads has a SQL injection vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress Paid Downloads plugin <= 3.15 - SQL Injection vulnerability

SQL Injection vulnerability discovered by 0xVenus in WordPress Plugin Paid Downloads versions = 3.15...

org.apache.camel.quarkus:camel-quarkus-integration-test-ldap (>=2.8.0 <=2.13.2), org.apache.camel.quarkus:camel-quarkus-ldap (>=2.8.0 <=2.13.2) +2 more potentially affected by CVE-2022-45046 via org.apache.camel:camel-ldap (>=3.15.0 <=3.18.3)

org.apache.camel:camel-ldap MAVEN version =3.15.0, =2.8.0, =2.8.0, =2.8.0, =3.15.0, =3.18.3 Source cves: CVE-2022-45046 Source advisory: OSV:GHSA-W66J-XC7R-M2JV...

PT-2005-3287 · Slimftpd · Slimftpd

Name of the Vulnerable Software and Affected Versions: SlimFTPd versions 3.15 through 3.16 Description: The issue allows remote authenticated users to execute arbitrary code via a long directory name to certain commands. This can be achieved by sending a long directory name to the 1 LIST, 2 DELE ...

PT-2004-3310 · Slimftpd · Slimftpd

Name of the Vulnerable Software and Affected Versions: SlimFTPd versions 3.15 and earlier Description: The issue allows local users to execute arbitrary code via a long command. Commands such as CWD, STOR, MKD, and STAT can be exploited. Recommendations: For SlimFTPd versions 3.15 and earlier, at...